A systems administrator is concerned after reviewing the results of a vulnerability scan: Which of the following mitigation strategies best addresses the risk?

The correct answer is C. Apply compensating controls. Compensating controls reduce risk when a vulnerability cannot be immediately remediated, such as when a patch is unavailable or cannot be applied, by implementing alternative safeguards to mitigate exposure.

Submitted by thandi_sa· Mar 6, 2026Vulnerability Management

Question

A systems administrator is concerned after reviewing the results of a vulnerability scan:

Which of the following mitigation strategies best addresses the risk?

Exhibit

Options

ACreate an exception.
BWait for a patch release.
CApply compensating controls.
DDisable the affected application.

How the community answered

(52 responses)

A
2% (1)
B
8% (4)
C
79% (41)
D
12% (6)

Explanation

Compensating controls reduce risk when a vulnerability cannot be immediately remediated, such as when a patch is unavailable or cannot be applied, by implementing alternative safeguards to mitigate exposure.

Topics

#Vulnerability mitigation#Compensating controls#Vulnerability management#Risk treatment

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice